App Security Expert
Listing checked October 16, 2026 · pay as published by Micro1
Overview
micro1 seeks App Security Experts to support a customer's active project centered on real-world application security. Your domain knowledge will directly train next-generation AI systems, helping models learn how to reason about secure and vulnerable code. You will build small application fixtures that embed OWASP LLM risks like Sensitive Information Disclosure and Excessive Agency, then create deterministic tests and hidden answer keys for evaluation. No prior AI experience is needed. The engagement is remote and contractor-based.
What You'll Do7
- 1Build compact application fixtures that contain either deliberate security flaws or secure implementations, with a focus on OWASP LLM risks such as Sensitive Information Disclosure and Excessive Agency.
- 2Write deterministic test cases and security-context manifests that measure an application's security posture.
- 3Produce hidden answer keys so AI systems or scanners can tell vulnerable code apart from secure code.
- 4Review and refine pipeline methods to keep synthetic tasks and fixtures both realistic and challenging for AppSec assessment.
- 5Document technical findings and methodologies with clear written feedback.
- 6Share results and review peer contributions through written and verbal communication.
- 7Work with agent-based security architecture and help improve the evaluation pipeline over time.
Requirements7
- 15+ years of experience in application security, secure software development, or CyberSWE roles.
- 2Solid grasp of OSWE, LLM security, AI-SAST, and AppSec best practices.
- 3Proven background designing or evaluating security architecture for traditional and agent-based applications.
- 4Hands-on expertise building, securing, and testing application codebases, including finding and fixing advanced vulnerabilities.
- 5Strong written and verbal communication skills, with an emphasis on precise technical documentation and collaborative feedback.
- 6Experience with synthetic security fixtures and deterministic testing methods is highly desirable.
- 7Track record of delivering actionable security recommendations in a remote contribution setting.
Who Should Apply
The ideal candidate brings 5+ years in AppSec or secure software development, with deep familiarity in OSWE, LLM security, and AI-SAST. You have built or evaluated security architecture for both traditional and agent-based apps, and you can write clear technical documentation. Experience with synthetic fixtures and deterministic testing sets you apart.
Salary Insight
Compensation for this contractor role is $40 to $80 per hour. The source lists this range, so use it as your baseline when discussing the engagement.
Pay and demand for Machine Learning & AI roles
AggregatedTypical pay
$75/hour
This role
$40–$80/hr
Most Machine Learning & AI roles pay $52–$100 per hour. This role's pay falls inside that range.
Based on 698 similar roles that publish pay · 184 publish only a top rate; those count at the rate they gave
Rates shown per hour. Yearly and monthly pay converted; one-time fees and non-USD pay are not included.
- Live similar roles
- 829
- Listed in last 30 days
- 348
- Remote
- 95%
Hiring most right now: micro1 (271) · SME Careers (153) · Mercor (102)
Most requested skills · share of roles
- python16%
- llm evaluation14%
- ai training14%
- technical writing11%
Figures from Machine Learning & AI roles live on NearSkill when this page loaded. A role can close before you apply, so check the listing itself.
Compare your resume against these rolesLocation
Compensation
$40–80/hr
Required Skills
Application Tip
In your application, highlight specific projects where you designed or tested application fixtures for OWASP LLM risks, and name the exact tools and frameworks you used. Quantify your impact, such as the number of vulnerabilities you remediated or the size of codebases you secured, to show direct alignment with the role's focus on AI-SAST and agent security architecture.
How NearSkill helps you apply
1. Check your job match
We compare your resume with the job requirements to help you understand how well your experience fits.
2. Continue to the employer’s website
We’ll direct you to the employer’s application portal, where you can complete the application.
3. Get updates by email
If NearSkill is handling follow-up for this role, we’ll email you when there’s an update on your screening.
Want to check your fit first?
See how your resume matches this role before applying.
Check my job matchSimilar open positions
Explore active roles that match your skills and interests.
Micro1
VerifiedProduct Security Engineer
This is a chance to shape the future of security engineering at a company building AI-native systems. As a Product Security Engineer, you'll design autonomous security platforms that use machine learning and large language models to find and fix vulnerabilities at scale. You'll work remotely with a team that values deep technical expertise and a proactive approach to securing modern software and AI workloads.
AfterQuery
VerifiedSecurity Engineer - Cryptanalysis (Remote Contract)
AfterQuery is assembling a research cohort of senior security specialists to test how frontier AI models handle advanced problems in cryptanalysis and reverse engineering. The work centers on evaluation, not production engineering. You will define what a correct or excellent answer looks like for problems you already solve in practice, then judge model output against that bar. The project runs remote and asynchronous, with flexible hours that fit around your current role. Candidates with 6 to 10 years of security experience and a Bachelor's degree, with a Master's preferred, move to the front of the review queue.
Mercor
VerifiedCybersecurity Research Expert – Offensive Security & Vulnerability Research
Mercor is hiring experienced Cybersecurity Research Experts to test how well frontier AI models handle advanced security reasoning, vulnerability analysis, and exploit development. In this remote, hourly contract role, you'll review AI-generated security assessments, validate root-cause findings, and help build benchmarks that push AI security capabilities forward. This is a fit for practitioners with a strong track record in offensive security and a public portfolio of technical contributions.
AfterQuery
VerifiedInformation Security Analyst Expert
AfterQuery builds the expert evaluation data that frontier AI labs use to measure and improve model judgment. The company seeks contract information security analysts to author and grade the incident response and detection engineering scenarios behind those evaluations. You create realistic security exercises that move from alert triage through remediation, then write reference answers that show the investigative reasoning behind each decision. You also grade model output for technical accuracy and operational soundness, and flag guidance that sounds plausible but would weaken security posture. Work happens remote with no fixed hours, aside from a 10-hour weekly minimum.
AfterQuery
VerifiedCybersecurity Expert
AfterQuery seeks a Cybersecurity Expert for a paid, part-time remote project that trains frontier AI models on security workflows. The core work involves building code repositories with OSS-fuzz-style vulnerabilities, then writing and validating patches that fix them. Tasks run async, so you can schedule them around a full-time job, evenings or weekends. The listing quotes $75.00/hr, and project notes mention per-task bonuses plus a $200 referral bonus for qualified experts.
Micro1
VerifiedVulnerability Researcher and Staff Security Engineer
Remote role for a vulnerability researcher and staff-level security expert who operates as an internal adversary to uncover novel attack paths. You’ll study threats across AI agents, cloud infrastructure, developer platforms, and production systems, then collaborate with engineering to raise the stack’s resilience. Expect to build offensive tooling and publish internal research to shape security strategy. The position is full-time and focused on practical, hands-on security work in a remote setting. Bold Multi-Cloud, Red Teaming, AI security.